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Abstract 

In 1965 Dag Prawitz presented an extension of Gentzen-type sys- 
tems of Natural Deduction to modal concepts, obtaining three new 
systems of Natural Deduction for S4. Maria da Paz Medeiros showed 
in 2006 that the proof of normalization for classical S4 does not hold 
and proposed a new proof of normalization for a logically equivalent 
system, the NS4. However, two problems in the proof of a lemma used 
by Medeiros in her proof were presented by Andou Yuuki in 2010. This 
paper introduces a new proof of normalization for NS4. 



1 Introduction 

In his doctoral dissertation, Dag Prawitz extended the Gentzen-type systems 
of Natural Deduction (ND) [2] to modal concepts, obtaining three Gentzen- 
type systems of ND for S4 based on classical, intuitionistic and minimal 
predicate logic. For this purpose, Prawitz added a modal operator for ne- 
cessity (the "N" operator, here represented by □) and defined the following 
rules for introduction and elimination of □: 

A -I ^--E (1) 



UA A 

Prawitz noticed that with these new rules the normalization procedure 
does not hold. He presented three versions of those modal systems of which 
only the third one would accept the Normalization Theorem. 

About forty years later, Medeiros pQ provided a counterexample showing 
that the Normalization Theorem does not hold even on Prawitz's third ver- 
sion of the ND system for classical S4. Medeiros also proposed a correction 
to Prawitz's system. 
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However, recently Yuuki [3j pointed out two problems in the proof of 
a lemma (the critical lemma) used in the proof of Medeiros' Normalization 
Theorem. 

Our goal on this paper is to present a correction of Medeiros's proof of 
the aforementioned lemma. In section [2] we outline the original Prawitz's 
system for classical S4, and the counterexamples by Medeiros are stated at 
section [3l At section H] we discuss the two cases in which the system may 
not produce valid derivations on NS4 due to problems in the proof of the 
critical lemma. In section [5] we introduce a new proof of the critical lemma. 



2 Prawitz's S4 classical modal logic system 

The difference between each one of the S4 classical modal logic systems 
presented by Prawitz is on the restriction of the D-I rule. The first version, 
has the restriction that D-I can be applied only when its premisses depend 
solely on modal formulas. However, the Normalization Theorem does not 
hold. For instance, Prawitz pointed out that the derivation 

[UA] 2 [DB] 1 
A B 
AAB 
D(A A B) 

oAaoB QB^o(AaB) 1 ^ ^ 

DA A OB UA DA — ?• (OB — > a (A A B)) 

OB OB ^ O(AAB) 

O(AAB) 

is a derivation in this system but its reduction 

DA A OB 

OA PB] 1 

_A B_ 

AAB 

OA A OB O(AAB) i 

DB OB — ^ a (A A B) 

O(AAB) 

is not. Notice that D-I cannot be applied in * for it depends on a formula 
that is not modal (OA A OB). 

Hence Prawitz liberalized the restriction on D-I, also allowing it to be 
applied when its premisses depend only on essentially modal formulas. A 
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formula A is essentially modal when "each occurrence of a predicate param- 
eter or predicate constant in A stands within the scope of an occurrence of" 
□ . 

This notion clears the way to a second version of the system, in which 
both ^) and its reduction are correct derivations. However, we can still find 
a derivation whose reduction is not a derivation in the system: 



PA}' 



OA A B 



OA A B ooA 1 > — 

oA oA — >■ an A 



ooA 



OOA 



Notice that D-I could not be applied in * for OA A B is not an essentially 
modal formula. 

Finally, Prawitz's last restriction states that, if a formula A depends on 
an assumption B and there exists an essentially modal formula F on the 
thread of A from B such that A depends on every assumption which F 
depends on, then □-! could be applied at A. 



3 A counterexample for Prawitz's classical S4 sys- 
tem 

f n 

In what follows, _ is a sequence of deductions of the form 1 . where 

OB ' OBi 

no two DJBf's are equal. The reason of this restriction is explained in item 

4 of the proof of the critical lemma and it does not affect the completeness 
of the system. We also write to indicate that each OBi is discharged 
at k. The labels may be dropped. 

Medeiros [T| showed that Prawitz's last version of S4 would not avoid 
maximal formula^] by presenting the following derivation 

[-■□.A] 1 -nOA-^B 

B ^B 



A 

C^A 
n(C->A) 

which is valid in S4 but whose reduction is not: 

1 see some of the definitions of the terms used in this article in the appendix. 
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M 1 



i 



C A 
□ (C -> A) 

Then, Medeiros PQ presented a new version for the S4 system, the NS4. 
This new system is composed of the logical symbols A, V,— >, _L and □ and 
its rules are the usual, except for D-I, which is as follows: 

pB] k 
UB A 



UA 



k 



The restriction on D-I rule states that all the assumptions in [D.B] fc must 
be discharged by the application of D-I and the premiss A must not depend 
on any assumption other than the ones in OB. 

With this new rule, we have the following reduction: 

PB] k g 
" Al > P$) (3) 



UB A 
UA 

~A~ A 



Ai 
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There is also the following permutative reduction. 



DA 



pAy 

Ai 
B 



UB 



UA 



□z5 



OP 

□c 



[DA}> 



OB 



UC 



[UB)3[UD\ k 
A 2 > 

— k,j 



pA] k 

Ai 
B 

k 

A 2 
C 



■J,* 



(4) 



4 A problem in the normalization proof of NS4 

The proof of the normalization for NS4 by Medeiros [T] requires the use of the 
critical lemma. This lemma states that "if IT is a critical simplified derivation 
of C from r, then IT can be transformed into a simplified derivation IT' such 
that I(n') < 1(H)" The proof states that a derivation IT of C from V can 
be transformed in a simplified derivation IIo. And, by the critical lemma, 
a subderivation S of II can be transformed in a subderivation £' such that 
/(£') < J(S); then IT is the derivation resulted from the substitution of £' 
for S in IIo- Medeiros aimed to show that /(IT) < /(IIo) 

Yuuki [3j pointed out two flaws on the proof of this lemma. The first 
one concerns critical derivations of the form 



(5) 

S 
H 

r 

where the major premiss F is the conclusion of J_c and r is an elimination 



So,i 
F 



n 



_L 

^0,2 

_L 



C 
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rule. According to Medeiros, this derivation can be transformed into 



£0,1 ^ 



£0,1 ^ 
F H 



F H C hC? 
W = J r or to II"= j— 1 — (6) 

S 0,2 £ ,2 

1 _L . 

~c 1 

depending on C being ± or not. 

Note that the assumptions of the form -<F discharged at the rule i may 
occur more than once in II, multiplying the occurrences of the maximal 
premiss F in II' and II". In this case the index of either II' or II" may be 
even greater than that of II. Besides, one of the H^s in H, say if/, may 
be a maximal formula of degree G(F) and, in this case, even if the F side 
connected with ->F is not a maximal formula in II', this if/ still is and the 
induction hypothesis cannot be used. 

The second problem pointed out is when II has degree G(OA) and is a 
critical derivation of the form 



n = 



pB] k 
S Ai 

OA k 



_L 
So 
_L 

UA 



ac 



ub 



A 2 

B_, . 

1,3 



(7) 
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If nA occurs more than once as top- formula of A2, by reducing II to 



pB} k 
Ai 

PB]i A 

DA pC] e 
S * A 2 

~ UB UC B_ . 

UB ' J 

I 

So 
_L . 

w* 

the number of occurrences of OA as maximal formula in II' will be greater 
than in II. 

Thus, it is possible that the reduction process generates copies of maxi- 
mal formulas, so the index of II' may be greater than that of IT. 



5 Yet another proof of the critical lemma 



1 



Si 

Lemma 1 A critical derivation of the form H = j_ £ where F 



F 1 B 



C 

is the conclusion of _L C; can be transformed in a derivation 
F hF] 1 



_L 

IIi = where Ii\ is a simplified derivation without 

1, t 

F B 



C 

trivial formulas. Thus, the end-formula of 1 is not conclusion of i_ c . 
Note that Yl\ has no more maximal formulas of degree equal to or higher 
than G(F) than II. We will use the symbol cx to indicate the transformation 
of a derivation into a simplified derivation without trivial formulas. 

Proof 1 See the work of Medeiros 
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Theorem 5.1 If II is a critical simplified derivation of C from T, then II 
can be transformed into a simplified derivation II' such that G(U') < G(U). 

Proof 2 Suppose II is a critical simplified derivation with maximal pre- 
misses of degree G(U) which are premisses of the last inference of U, #(7(11) 
is the number of maximal formulas of II with degree G(T1) and £(H) is the 
lenght ofU. The proof is by induction on the pair (#G(II), ^(11)}. 

Si £2 

1. n = A b_ > £1 _ n , 

A A B A 
A 

It is easy to see that G(W) < G(U). 

2. n = Sl B > ^ = n' 



A A —?■ B 



S 2 
B 



B 

It is easy to see that G(W) < (7(11). 
PB] g 



□c 



Ai 

C 



c 

If there existed a OBi which is a maximal premiss at U' , then it would 
be a maximal formula at H and, as II is a critical derivation, G(OBi) < 
G{UC). Thus, G(n') < G(n). 

pB\ k 

4- n = og ^ * A 2 > 

□A fe H C . , 



□ C 

Ai 

[□B]' A 

S A 2 
OB H C 



uc 

We have two cases to consider: 



■3,1 
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(a) there is an occurrence of OA which is top- formula of A2 and 
major premiss of an application of D-E: in this case, the number 
of maximal formulas of degree G(oA) in Jl\ may be even greater 
than that ofH, as there may be more than one occurrence of OA 
as top-formula o/A 2 . 

[OB] k 
A3 

There is a critical subderivation E\ of Hi of the form ^ 



UA 



A 

OB 

which can be reduced to E[ = A3 (case 3). 

A 

(b ) there is an occurrence of OA which is top- formula of A2 and major 
premiss of □-! : then, there is a critical subderivation E2 of the 



form 



OB] k 

a, pAlpcy 



^3 

OB A , * A 4 



OA OC D . , 

OD 

The lenght of H2 is smaller than the lenght of IT. Hence, by 
induction hypothesis, we can reduce H2 to a E' 2 such that G(S 2 ) < 
G(U). 

Note that we cannot guarantee that the lenght of E2 is smaller 
than the lenght ofH if there were more than one occurrence of OA 
as top-formula of A 2 in Hi, and if there were many occurrences of 
OA as major premiss in £2. That is the reason of the restriction 
on the beginning of the section. 

Let II2 be the result of replacing each occurrence of critical subderiva- 
tions of the form 0/H1 and the form 0/H2 in Hi by and S 2 respec- 
tively. 

If OA is the only major premiss that is maximal formula in H, i.e., 
there is no member of H which is a maximal premiss of the same degree 
ofH, then G(n 2 ) < G(H) and II2 = IT. Otherwise, i.e., if there exists 
a k such that Hj- is a maximal formula in H, then #G(II 2 ) < #G(n) 
and, as IT2 is a critical derivation, by induction hypothesis IT2 can be 
transformed into a derivation H' such that (^(n 7 ) < G(Il2). Hence, as 
II was transformed into II2, G(H') < G(H). 
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y y 
^1,1 ^1,1 

S X 1 A 

5. II = I oc y> \> I 

-4Ai3 ± £' lj2 



A AA5 1 J_ 



27ie _L is major premiss in II, so i/ i/ie end formula of T,[ 1 is not the 
conclusion of an introduction rule, then the end-formula of £^ 1 is not 
a maximal formula and G(IIi) < G(II) and Hi = II'. If the end for- 
mula o/£' 1;1 is the conclusion of an introduction rule, then II i is of the 
£ 3 £4 

_A B_ S 3 

A A B A [^A] 1 

A K4] 1 
form -j- which can be reduced to 



A 

= W andG{W) < G(U). 



± 

y 
^1,2 

2 JL_ 



Si, 



0. n = 



n(A -> B)] 

£1 

_L 

A ^ B 

B 



A-> B h(A^B)] 1 
I 



oc 



^1,2 
_L 

A ^ B 



£2 
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s ia £ 2 

± =ni 

If the end formula of E' x l is not the conclusion of an introduction rule, 
then G(IIi) < G(U) and U x = W. 

If the end formula of T,[ 1 is the conclusion of an introduction rule, 

[A] 
£3 

B £ 4 



A -> B A 



then IIi is of the form B which can be re- 



_L 

^1,2 

it' 



£ 4 

(A) 
£3 

duced to — -h3 = W and G(W) < G(U). 

V 
^1,2 



^1,1 ^1,1 

[-□A] UA h^A} 1 OA 

Ei 1 A S4] 1 

n = oc E / 2 > 1 = n a 



// i/te end formula of E' x x is not the conclusion of an introduction rule, 
then G(IIi) < Giji) and II 1 =11'. // the end formula of E^ is the 



11 



conclusion of an introduction rule, then II i is of the form 
[UB] k 
* Ai 
DB A , 



(OB) 
Ai 



_L 

2 

_L . 



□A 

A which can be reduced to t -1 ^ 

I 

^1,2 

= n 2 

If one of the OBi were a maximal formula in n 2 , it would be a maximal 
formula in II and, as U is a critical derivation, G(OBi) < G(pA). 
Thus, G(n 2 ) < G(n) and n 2 = n'. 

8.IL=, $ S „ oc 



2 

□a * i? C 



DC 



Hi 

□ A [-.DA]' 



(-L) 

J. * s 



2 

□A '"_ H C_ 

□ C 



pA]\[HV 
Hi * S 2 
UA H C 



□C 



^1,2 
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Note that E' x l is a subderivation ofT,±. Hence, if the subderivation A = 
pA] l ,[H]* 

1 ' 1 ^ 2 of III is a critical derivation, its lenght is 

DA H C , . 

1,3 



□c 

smaller than the lenght ofH. Thus, by the induction hypothesis, A can 
be reduced to a derivation A' such that G(A') < G(JV). The result of 
replacing each occurrence of A in Hi by A' is a derivation H' such that 

G(n') < G(n). 

Hi 

hF} 1 F 



Si _ 1 

9.U= | * oc 



Si. 



2 



F H „ ± * 



J- T 1 H 



S'i,i * 
_F 

ni= ± 

^1,2 

_L 

Si,i * 

The critical subderivation A = ^7 }j of Hi is smaller than H. 

I 

Thus, by the induction hypothesis, A can &e reduced to a derivation A' 
suc/i i/jai G(A') < G(II). 5y replacing each occurrence of A in Hi by 
A' we achieve the desired derivation. 



S' 



[F] 1 



F] 1 F -»• C g 



m n = v >ni = g z> 0. 

j_ ' c 

y J s 

~B~ el ^2 

B 

If the _L is a minor premiss of an application of E^, then G{H) < G(IIi' 
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A Definitions 



Some definitions found here are based on the work of Medeiros pQ . 

Definition 1 The premisses (A — »■ B) of the rule (E^), (A A B) of (E A ), 
(AVB) of(Ey), (a A) of {E n ), and the premisses □S 1 ,...,DB ri of (I a ) are 
called major premisses and the others minor premisses. 

Definition 2 A segment in a derivation is a sequence Ax,.,.,A n of occur- 
rences of the same formula in a branch such that A\ is not the conclusion of 
an application of (Ey ) nor a discharged assumption through an application 
of (In ), and A n is not a minor premiss of (Ey ) nor a major premiss of (In )■ 

Definition 3 The length of a segment is the number of formula occurrences 
in this segment. 

Definition 4 A maximal segment in a derivation is a segment Ai,...,A n 
such that A\ is the conclusion of an application of an introduction rule or 
(-\~c), o,nd A n is a major premiss of an application of an elimination rule. 

Definition 5 A maximal formula is a maximal segment whose length is 
l(one). A premiss is called maximal premiss if it belongs to some maximal 
segment. 

Definition 6 A formula A is a trivial formula if A is the conclusion of an 
application of (-L c ) an d the minor premiss of an application of (E^) whose 
major premiss is the assumption —>A. 

Definition 7 A derivation is a simplified derivation if the minor premisss 
of every application of (Ey ) is the formula JL 

Definition 8 The degree of a formula A, G(A), is the number of occur- 
rences in A of logical symbols different from _L. The degree of a segment is 
the degree of the formula that belongs to this segment. 

Definition 9 The degree of a derivation IT, G(T1) is the highest degree of a 
maximal segment ofH. IfU does not have maximal segments, then G(T1) = 
0. 

Definition 10 A critical derivation is a derivation IT such that, if G(T1) = 
d, then the last inference of U has a maximal premiss with degree d, and for 
every subderivation £ ofTL, < G(II). 
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Definition 11 The index of a derivation IT is 1(H) = (d, s), where s is the 
sum of the lengths of the maximal segments of IT whose degree is d. If IT 
does not have maximal segments, then /(IT) = (0,0). 

Definition 12 A derivation IT is a normal derivation if IT does not have 
maximal segments. 
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